• Mehr als 3 Millionen Wörter Inhalt
  • |
  • info@itmedialaw.com
  • |
  • Tel: 03322 5078053
ITMediaLaw - Rechtsanwalt Marian Härtel
Warenkorb
Plugin Install : Cart Icon need WooCommerce plugin to be installed.
  • en English
  • de Deutsch
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Kurzberatung
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
ITMediaLaw - Rechtsanwalt Marian Härtel
Home Data protection Law

ECJ ruling on the GDPR: Consequences and recommendations for action for companies processing personal data

15. May 2023
in Data protection Law
Reading Time: 4 mins read
0 0
A A
0
20200427 Eugh Diskr o Person
Key Facts
  • The GDPR has fundamentally changed corporate practices for processing personal data.
  • The ECJ ruling (C-300/21) specifies claims for damages in the event of data protection violations.
  • Three conditions must be met for claims for damages: breach, damage and causation.
  • Companies should review their data protection practices to minimize legal risks.
  • A data protection officer should be appointed to monitor compliance.
  • Transparent communication about data usage can strengthen customer trust.
  • Preventive measures are crucial to avoid future GDPR violations.

The General Data Protection Regulation (GDPR) has fundamentally changed the way companies handle personal data. It has set new standards for transparency, accountability and individual rights in relation to the processing of personal data. A recent ruling by the European Court of Justice (ECJ), Case C-300/21, clarified some important aspects of the GDPR. This ruling dealt in particular with the conditions for claims for damages in the event of breaches of the GDPR. It thus provides important clarification and guidance for companies that process personal data. In the ever-evolving digital landscape, it is critical that companies understand the current legal framework and rulings in order to meet their obligations and maintain the trust of their customers.

Content Hide
1. The ECJ ruling C-300/21: What is at stake?
2. Claims for damages and the GDPR: What does the ruling say?
3. The relevance of the ECJ ruling for companies
4. Consequences of action for companies that process personal data
5. Preventive measures for companies in handling personal data

The ECJ ruling C-300/21: What is at stake?

The case concerns Austrian Post, which collected information on the political preferences of the Austrian population without the explicit consent of the persons concerned. It used an algorithm to define target group addresses and deduce that a particular citizen might have a high affinity for a particular political party. This practice constituted a violation of the General Data Protection Regulation, as the data were collected and processed without the explicit consent of the data subject. A citizen whose data was used in this way felt that his rights had been violated. He claimed to have suffered immaterial damage in the form of annoyance, loss of confidence and a feeling of being exposed as a result of this data processing and demanded compensation of 1,000 euros.

Claims for damages and the GDPR: What does the ruling say?

The ECJ ruling stated that a claim for damages is subject to three cumulative conditions: a breach of the GDPR, resulting material or immaterial damage, and a causal link between the damage and the breach. Not every breach of the GDPR automatically leads to a claim for damages. Moreover, the non-material damage does not have to reach a certain level of severity to constitute a claim for damages.

The relevance of the ECJ ruling for companies

This ruling is of great importance for companies, as it clearly defines the framework for possible claims for damages in the event of violations of the GDPR. It clarifies that not every breach of the GDPR automatically leads to a claim for damages, but that there must be a direct causal link between the breach and any resulting material or immaterial damage. In addition, the ruling underscores the need for companies to adhere to strict data protection practices to ensure compliance with the GDPR and avoid potential legal consequences.

The decision also sets a precedent for other similar proceedings, including those that could affect large tech companies like Facebook. It provides a legal basis for future cases in which users wish to claim damages for violations of the GDPR. It is therefore very likely that this ruling will be used as a reference in future court proceedings and in the assessment of data protection violations. It should therefore serve as a wake-up call for all companies that process personal data to review their data protection practices and ensure that they respect the rights of data subjects

Consequences of action for companies that process personal data

Companies that process personal data should take this ruling as an opportunity to review their data protection practices and make any necessary adjustments. A key recommendation is to implement mechanisms to review and update data processing consents. It is essential to keep data subjects’ consent up to date while communicating clearly and understandably how their data will be used.

Furthermore, companies should design their processes to identify and document any potential negative impact of their data processing activities on individuals. This is of great importance, as the ruling underlines that a direct causal link between the infringement and damage must be proven in order to claim damages.

In addition, the introduction of a comprehensive and easily accessible complaints and redress procedure could be beneficial. This should allow affected individuals to raise concerns and claim compensation if they believe their rights have been violated. Companies should also consider that the level of transparency they provide to affected individuals can have a direct impact on their trust and satisfaction. It is therefore advisable to communicate proactively and openly about data protection practices and to promote a culture of data protection responsibility.

Preventive measures for companies in handling personal data

To avoid future breaches of the GDPR and potential claims for damages, companies should take a number of preventive measures:

  1. Increase awareness and training: Employees should be regularly trained and kept up to date on the latest GDPR regulations and practices. This helps to avoid potential data breaches and create awareness of the importance of data protection within the company.
  2. Data protection officer: Companies should appoint a data protection officer who is responsible for monitoring data protection practices and policies. This person should also be the contact person for data protection issues, both internally and for data subjects.
  3. Data protection impact assessment: A data protection impact assessment should be carried out for new projects or changes that affect the processing of personal data. This can help identify and mitigate potential risks.
  4. Transparency and communication: Companies should communicate clearly and transparently about their data processing practices. Data subjects should have easy access to information and know how to exercise their rights under the GDPR.

The ECJ’s ruling in Case C-300/21 provides important guidance for companies when processing personal data. Now is the time to review data protection practices and ensure they meet the requirements of the GDPR to avoid potential legal consequences. It is clear that compliance with the GDPR is not only a legal requirement, but also an important step in ensuring the trust of customers and the public.

Tags: CustomizationFacebookGeneral Data Protection RegulationInformationJudgmentsPersonal dataPrivacyRegulation

Weitere spannende Blogposts

When do you need a lawyer for your contract?

When do you need a lawyer for your contract?
3. December 2022

Introduction Some people think that there is no need to consult a lawyer for a contract. But in reality, there...

Read moreDetails

Why working with a lawyer is an important added value for influencer agencies

Why working with a lawyer is an important added value for influencer agencies
14. March 2023

Legal security for influencer agencies Influencer agencies have to deal with a variety of legal issues in today's world. These...

Read moreDetails

Stumbling blocks you should be aware of when reading a contract

Stumbling blocks you should be aware of when reading a contract
4. January 2023

Why is it important to read and understand contracts? Contracts are an essential part of everyday life. They help us...

Read moreDetails

Digistore24 is liable for infringements of competition law by its clients

1af488a272d1cfb788f65cc7e6bd1023
13. August 2024

Digistore24 is liable for infringements of competition law by its clients In a recent ruling, the Higher Regional Court of...

Read moreDetails

Facebook and the NetzDG

Facebook pages, data protection and August 1, 2019
3. April 2023

The Münster Higher Administrative Court recently ruled in an urgent decision that the obligation to provide a counter-appeal procedure provided...

Read moreDetails

My wife Saskia in the team of the firm

My wife Saskia in the team of the firm
17. February 2023

Every company, every entrepreneur and, of course, a law firm like mine would be nothing without the team behind it,...

Read moreDetails

Beware of misleading letters about Google Analytics

Reporting obligations under the Foreign Trade and Payments Act (AWG): A guide for startups and blockchain companies
8. June 2023

Recently, mass warnings in connection with the use of Google Fonts have caused considerable unrest. Companies and website operators have...

Read moreDetails

New age rating for computer games in Italy; all the information!

New age rating for computer games in Italy; all the information!
25. September 2019

The following article was originally written by Andrea Rizzi from www.insightlegal.it and published by me here on the blog in...

Read moreDetails

Blockchain in computer games – a new playing field for lawyers?

Blockchain in computer games – a new playing field for lawyers?
22. December 2022

Introduction: Blockchain and computer games - what do they have to do with each other? The use of blockchain technology...

Read moreDetails
Right of First Offer (ROFO)

Right of First Offer (ROFO)

16. October 2024

The right of first offer (ROFO) is a contractual agreement that gives a specific rights holder the opportunity to be...

Read moreDetails

Escape into default

26. June 2023
Venture debt

Venture debt

16. October 2024
How to set up and design the terms and conditions of an Esports event

Lootboxes

29. March 2025
Software development contract

Software development contract

27. June 2023

Podcast Folgen

7c0b449a651fe0b81e5eec2e23515012 2

Urheberrecht im Digitalen Zeitalter

22. December 2024

In dieser aufschlussreichen knapp 20-minütigen Podcast-Episode von und mit mir wird das komplexe Thema des Urheberrechts im digitalen Zeitalter beleuchtet....

Web3, Blockchain und Recht – Eine kritische Bestandsaufnahme

Web3, Blockchain und Recht – Eine kritische Bestandsaufnahme

25. September 2024

  In dieser aufschlussreichen Episode des ITmedialaw-Podcasts wird ein tiefgehender Blick auf die Schnittstelle von Web3, Blockchain-Technologie und Recht geworfen....

“Digitales Recht Entschlüsselt” mit Rechtsanwalt Marian Härtel

“Digitales Recht Entschlüsselt” mit Rechtsanwalt Marian Härtel

25. September 2024

In diesem spannenden 30-minütigen Podcast entschlüsselt Rechtsanwalt Marian Härtel die komplexe Welt des digitalen Rechts für Selbstständige, Startups und Solopreneure....

Das Metaverse – Rechtliche Herausforderungen in virtuellen Welten

Das Metaverse – Rechtliche Herausforderungen in virtuellen Welten

25. September 2024

In dieser faszinierenden Episode tauchen wir tief in die rechtlichen Aspekte des Metaverse ein. Als Rechtsanwalt und Technik-Enthusiast beleuchte ich...

  • Privacy policy
  • Imprint
  • Contact
  • About lawyer Marian Härtel
Marian Härtel, Rathenaustr. 58a, 14612 Falkensee, info@itmedialaw.com

Marian Härtel - Rechtsanwalt für IT-Recht, Medienrecht und Startups, mit einem Fokus auf innovative Geschäftsmodelle, Games, KI und Finanzierungsberatung.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
  • en English
  • de Deutsch
Kostenlose Kurzberatung